📦 Vega

This vulnerability in Vega visualization library allows arbitrary JavaScript execution via DOM-based XSS when applications meet two conditions: they attach Vega library or View instances to global sco...

This vulnerability allows attackers to execute arbitrary JavaScript functions through Vega's expression language, bypassing intended security restrictions. It affects users of Vega visualization libra...